Re: Time to let go of ipfilter
On 02/21/11 07:57, Atte Peltom瓣ki wrote:
> PF is simply too slow. It does have good functionality and it's easy to
> use, but it doesn't scale beyond small/medium networks. I stress-tested
> it some time ago and OpenBSD/pf could get a combined throughput of
> around 1.6Gbps. FreeBSD/pf got a little better, but not so that it would
> really mean much.
What was the max {memory,pci,processor} bandwitdth on the machine under
test?
Have you stress tested NPF?
討論串 (同標題文章)
完整討論串 (本文為第 17 之 23 篇)：